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(54) Method and arrangement for netwide call trace in a telecommunication network 



(57) The invention refers to a method and an ar- 
rangement for netwide call trace with various interfaces 
and protocol stacks of at least one call within a telecom- 
munication network by using a central call trace server 
(CS) and local intelligent call trace intelligent agents (I A) 
between the switching points (SP) of the telecommuni- 
cation network, said central call trace server being con- 
nected with all of said local intelligent call trace intelli- 



gent agents IA. The central server manages the intelli- 
gent agents and distributes information between the in- 
telligent agents. Only a reduced set of necessary data 
are sent to the central server by the intelligent agents, 
in case that the central server requires more data this 
data are sent by the intelligent agents upon request of 
the central server. The method and the arrangement al- 
lows an exact call trace inclusive wild cards and calls 
between different telephone networks (mobile/land). 
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Description 

[0001] The invention refers to a method and an arrangement for netwide call trace with various interfaces and protocol 
stacks of at least one call within a telecommunication network. 

s [0002] Intelligent telecommunication networks include networks for mobile communication being connected to fixed 
telephone networks. This is described in detail for example in the book "Mobilfunk und Intelligente Netze" by Jacek 
Biala, Vieweg Verlag, Braunschweig/Wiesbaden, Germany 1996, ISBN 3-528-15302-4, and in respective standards 
and recommendations of international organisations as for example ITU (International Telecommunications Union) or 
others also mentioned in the above referenced book. 

w [0003] A Global System for Mobile Communication GSM is connected via a Gateway Mobile Services Switching 
Center GMSC to, for example, Public Switched Telephone Network PSTN, Public Land Mobile Network, Integrated 
Services Digital Network ISDN, Packet Switched Public Data Network PSPDN or other mobile networks as for example 
D1, D2 or E1 Networks in Germany. A PSTN comprises several switching which are conncted with each other in or to 
build up connection between an optional number of users located at an optional number of geographical places within 

is the network. The GSM comprises a Switching Subsystem SSS performs the call management as well as the subscriber 
adminstration. For this, the SSS includes a Home Location Register HLR, a Visitor Location Register VLR, an Equip- 
ment Identification Register EIR and an Authentication Center AC all being connected to an Mobile Services Switching 
Center MSC. Within one GSM there are many MSC connected with the allocated HLR, VLR, EIR and AC. Between 
the main components exist standardised interfaces also mentioned in the above referenced book and international 

20 standards and well know lo a person skilled in the arL 

[0004] For the network operator it is necessary to get knowledge of mistakes in the transmission path independent 
of the endpoints of the call. Up to know there exists no possibilty for a netwide trace call. 

[0005] It is therefore the object of the invention as claimed to provide a possibility to perform a netwide trace call. 
This object is solved by a method according to claim 1 and an arrangement according to claim 14. Advantageous 
25 further developments of the invention are claimed in the respective subclaims. 
[0006] The method according to the invention comprises the following steps: 

- activating of the intelligent intelligent agents I A by the central server (CS) together with a message comprising the 
a trigger (TN) to be call traced; 

30 - comparing of the trigger (TN) with the contents of the call establishment messages of the calls running on the 
signalling channel (SC) by the intelligent intelligent agents (I A) and sending an establish message to the central 
server (CS) by those intelligent agents IA which have matched with the trigger number together with additional 
information (RL) about the detected connection between two switching points (SP) as well as at least the identifi- 
cation number of the intelligent intelligent agent I A; 

35 - sorting of the messages and information (RL) by the central server (CS) sent by the intelligent agents (I A), removing 
of redundant information and allocating of the information to the respective section belonging to two switching 
points (SP) being connected together; 

- tracing of all signalling data belonging to the detected call by the intelligent agents (IA) being involved in view of 
the matching of the trigger (TN); 

40 - detecting of the call terminating by at least one of said intelligent agents (I A) and sending a call termination message 
to the central server (CS), forwarding of the message concerning the call termination to all the other intelligent 
agents (IA) being involved in the call trace; and 

- transmitting of the recorded data to the central server (CS) and displaying of the data by the central server (CS) 
dependend on the different transmission layers in the telecommunication network. 

45 

[0007] The arrangement according to the invention for net wide call trace of at least one call within a telecommuni- 
cation network comprises a central call trace server (CS) and local call trace intelligent agents (I A) between the switch- 
ing points (SP) of the telecommunication network, said central call trace server (CS) being connected wilh all of said 
local call trace intelligent agents (IA) and comprises a call trace managing means with a call trace graphical user 
so interface (GUI) and an interface connected to said intelligent agents (I A), and said intelligent agents (IA) comprise an 
interface to the central server (CS) and an intelligent call trace unit (IU). The central server (CS) and intelligent agents 
(IA) are adapted to communicate with each other and to perform the following operations: 

activating of the intelligent agents IA by the central server (CS) together with a message comprising the a trigger 
55 number (TN) to be call traced; 

comparing of the trigger number (TN) with the call establish messages of the calls running on the signalling channel 
(SC) by the intelligent agents (I A) and sending an establish message to the central server (CS) by those intelligent 
agents I A which have matched with the trigger number together with additional information (RL) about the detected 
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connection between two switching points (SP) as well as at least the identification number of the intelligent agent I A; 
sorting of the messages and information (RL) by the central server (CS) sent by the intelligent agents (I A), removing 
of redundant information and allocating of the information to the respective section belonging to two switching 
points (SP) being connected together; 

s - tracing of all signalling data of the signalling channel (SC) by the intelligent agents (IA) being involved in view of 
the matching of the trigger (TN) and transmitting of the call relevant data to the central server (CS); 
detecting of the call terminating by at least one of said intelligent agents (IA) and sending a respective message 
to the central server (CS), forwarding of the message concerning the call termination to all the other intelligent 
agents (I A) being involved in the call trace; and 

io - transmitting of the signaling data of the call from the intelligent agents (I A) to the central server (CS) and displaying 
of the stored data by the central server (CS) dependend on the different transmission layers in the telecommuni- 
cation network. 

[0008] According to one important feature of the invention only a reduced set of necessary data are sent to the central 
75 server by the intelligent agents. In case that the central server requires more data, e.g. for enhanced result presentation, 
thes data are sent by the intelligent agents upon request of the central server. This avoids the sending of unnecessary 
information and overload of the central server. 

[0009] In the following the invention together with further advantages and objects is explained in detail in connection 
with the drawings, in which 

20 

Figure 1 shows a general overview about a telecommunication network; 
Figure 2 shows the netwide call trace in a telecommunication network of Figure 1 ; 
25 Figure 3 is an overview about international connections; 
Figure 4 depicts a general call setup; 

Figure 5 a principle arrangement of a signalling end point and signalling transfer point configuration; 

Figure 6 the messages of a signalling end point and signalling transfer point configuration according to Figure 5; 

Figure 7 an example for a signalling end point and signalling transfer point configuration with the respective values 
in the messages; 

Figure 8 the different protocoll stacks which are used for the communication between the network components; 

Figure 9 a general depiction of a protocol independent communication between intelligent agent and central serv- 
er; 

Figure 10 the principle arrangement of the central server and the intelligent agents; and 
Figure 11 the functional structure of the central server. 



30 



35 



40 



[0010] In the following description and in the text above the following abbreviations are used: 



ACM 


Address Clompete Message 


ANM 


Answer Message 


CIC 


Circuit Identification Code 


CPG 


Call Progress 


CS 


Central Server 


DPC 


Destination Point Code 


EDSS1 


Euro Digital Signaling System 1 


EIR 


Equipment Identification Register 


GMSC 


Gateway MSC 


GSM ! 


Global System for Mobile Communication 
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SSN 


Subsystem Number 


35 


STP 


Signaling Transfer Point 


SS#7 


Signaling System Number 7 




TCAP 


Transaction Capability Application Part 




TMSI 


Temporary Mobile Subscriber Identity 




TN 


Trigger Number 


40 


REL 


Release Message 




VLR 


Visitor Location Register 




VMSC 


Visitor MSC j 



Related Standards 



[0011] 

Q.767 CCITT Specification of ISDN User Part (Blue Book) 

Q.701 - 704, Q.706, Q707 CCITT Spec, on SS #7 MTP (Blue Book) 

Q.711 - 714, Q.716 CCITT Spec, on SS #7 SCCP (Blue Book) 

Q.771 - 774 CCITT Specification of TCAP (White Book) 

GSM 08.08 BSS-MSC Layer 3 Specification 

GSM 09.02 Mobile Application Part Specification 

GSM 04.08 Mobile Radio Interface Layer 3 Specification 

Q.1218 ITU-T Interface Recommendation for Intelligent Network CS-1 

Q.931 EDSS1 
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[0012] Figure 1 shows the usal and well know connections within a telecommunication network with the respective 
interfaces for the mobile communication. Further depicted are the different protocols being used in the respective 
network (ISUR INAP). This figure depicts more detailed a mobile network, only in order to show the variety of interfaces 
which are involved in a call. This is also valid for each kind of network which comprises these mechanisms too. 
[0013] Figure 2 shows the connection points of the intelligent agents I A in the network of Figure 1. The connection 
points are between each switching point SP between the GSM and the PSTN or ISDN as well as between the switching 
points SP or MSC or the components within the GSM, PSTN or ISDN. The SS#7/Mobile Surveillance System as de- 
scribed below consists of two main parts 

• The probes for recording of signaling information and storing of these data (messages) onto hard disc. The probe 
consists of hardware and a frontend workstation recording messages and storing data. 

• Applications extracting results and presentation for surveillance, qualification and trouble shooting of SS#7/mobile 
networks. The applications run on different workstations (client/server concept) due to the software architecture 
of a distributed system. On the frontend workstation (client, probe) preprocessing and data reduction is performed. 
On the central work station CS (server), controlling all clients, the surveillance system and all applications are 
configured, the results of the applications are determined and presented to the user. 



[0014] The data recording can be provided permanently. During 24h all signaling data are recorded on all SS#7 
interfaces of the network and stored on hard disc for further processing. 
20 [001 5] The world wide SS#7 network consists of an international network using as transit network and national SS#7 
networks which are connected to the international SS#7 network. 

[0016] lnFigure3thetransitnetworkstructureinan international telecommunication structure is explained. A German 
transit network, for example, connects the two PLMN networks D1 and D2 to the fixed network of the German Telecom. 
The fixed network contains Signalling Points SPs which are connected to the international transit network. 
25 [001 7] As shown in Figures 4 and 6 the telecommunication network consists of many switches SP which are identified 
by the signalling point code SPC. Each switch has a unique signalling point code in the network. The signalling point 
code is used as an address to send messages in the network from one switch to the other. The messages are sent 
either directly from one switch to the neighboured switch (signalling end point SEP) or via a transfer point (switch) STP 
to the succeeding switch. The routing label RL which identifies messages belonging to the same call consists of orig- 
30 inating point code OPC, destination point code DCP, circuit identification point code CIC and network identifier Nl. The 
call trace searches for messages matching the trigger TN (e.g. phone number). The following messages of the call 
contain the respective routing labels RL extracted from the messages transferring the phone number. It is possible that 
messages belonging to the call to be traced are passed via an other signalling link set as the message containing the 
trigger TN. Within one call many routing labels RL exist due to route the whole signalling path from one teriminal to 
the other. For effective call tracing it is required to optimize the communication interface between intelligent agent IA 
and central server CS. The central server CS sorts the incoming information and passes the data only to the relevant 
intelligent agents. This algorithm is necessary for performance optimization. 
[0018] The central server CS transfers only those information to the intelligent agent I A which may receive further 
signalling messages with e.g. this routing label RL. The algorithm uses the network topology to decide which agent 
40 will receive a particular information. It depends on the different aspects of the call trace and is treated as follows: 

1. quasi associated SS#7 network: 



[0019] The central server is informed by the agents if the trigger number has matched. The agents pass then also 
the detected routing labels to the central server. Routing labels are passed back to the agents which have matched 
the trigger number and to agents connected in the environment. Each agent acts physically between two switches 
identified with the point codes. A routing label is passed to an agent if either the switches with OPC or DPC or both 
(OPC and DPC) are connected physically to the agent. 

[0020] The advantage is that the number of routing labels to be passed will be reduced by factor 50.. 100 compared 
so with a full distribution of all routing labels to all connected agents IA. 

2. Higher layer information, intelligent distribution of information during the call trace: 

[0021] Other network procedures require the intelligent distribution of higher protocol layer information, e.g. 



Mobile Terminating call -> Mobile Roaming Number, IMSI 
Call forwarding call -> forwarded number 

Transfer to foreign network and back into own network -> phone numbers 
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[0022] In case of call forwarding and mobile terminating call the intelligent agents I A in the environment of the acting 
switch receive the new trigger numbers (forwarded number, Mobile Roaming Number) by the central server CS. These 
are all agents which are connected to the acting switch. One of the physical point codes where this agent is connected 
to must be the point code of the acting switch. The International Mobile Subsciber Identity IMSI is transferred to the 
5 agents connected to the switches (MSC) of the GSM which are connected to a PLMN A-lnterface. Also in PLMN 
networks the topology is used to reduce the amount of agents connected to the A-lnterfaces which are informed. Using 
the signalling link set transferring the IAM message with the Mobile Roaming number indicates the possible agents 
which can detect the Paging message containing IMSI. 

[0023] A call is passed from the own to the foreign network via an interconnection link. In case of call forwarding 
10 back into the own network or in case of using the foreign network as a transfer medium only the call is detected once 
more in the own network. The signalling traffic will be found on one of the interconnection links. If a message containing 
the trigger number is sent via an interconnection link the connected agent IA informs the central server CS with the 
standard procedure that the trigger number has matched. The central server uses the network topology and detects 
the outgoing signalling flow. The central server informs now all agents also connected to an interconnection link with 
is the respective routing labels RL. 

[0024] Figure 5 shows another depiction of the SEP/STP configuration according to Figure 6. The hardware of switch- 
ing points SPl and SP3 both comprise a switching equipment 1, a control entity 2 and a signalling equipment 3 being 
connected in series. The signalling equipments of SPl and SP3 are both connected with the signalling equipment 4 
of STP2 via signalling channel 5. STP2 only transfers the messages while SP1 and SP3 which are both SEPs perform 
20 the the establishment of respective routing labels RL. The switching equipments 1 of SP1 and SP3 are switched on 
the traffic channels 6. 

[0025] In connection with Figure 7 the difference between a SEP and STP is explained by way of an example based 
on an ISDN User Part ISUP protocol. In Figure 7a switch B is a fully equipped switch. It detects the DPC in the incoming 
message which is identical to its own SPC. Switch B provides a full ISUP protocol interface using the parameters of 

2S the message for further routing. The message is sent to switch B with a different routing label. The central server CS 
handles the two interfaces separately and independently. The DPC/OPC pair correlates to the physical network com- 
ponents permanently stored in the central server CS. The call trace is based on the SPCs in the messages only. In 
Figure 7b switch B is a transfer switch only. It detects the DPC in the incoming message which is not identical to its 
own SPC and transfers the ISUP message without checking to switch C. The routing label is not changed. The central 

30 server CS detects on both interfaces messages with the same routing label RL which are not equal to the network 
configuration permanently stored in CS. The physical SPC (switch A=1 , switch B=5, switch C=11 ) differs from the OPC/ 
DPC values in the messages The call trace is based on the SPCs in the messages only. Therefore the difference is 
not relevant, except at the result presentation to distinguish between exactly the same traces from two physically 
different interfaces. 

35 [0026] The call trace is performed in several phases: 

• Phase 1 : trigger recognition. 

• Phase 2: collection of messages belonging to this particular call and detection of events (e.g. call forwarding). 

• Phase 3: call release detection or termination of the call in case of error. 

40 

[0027] Call trace description for ISUP protocol: The routing label consists of SIO which contains network indicator 
Nl and service indicator SI. DPC and OPC. The Nl together with the DPC/OPC identifies the unique point codes of the 
SEPs between the traced message is transferred. The central server configures its probes (intelligent agents) to the 
interface where it is connected to. All interfaces are configured with a pair of point codes (SPC and Nl) identifying the 

45 switches connected to this particular interfaces. In case of SEPs the configured point codes are identical to the points 
codes in the messages monitored on this interface. In case of STPs the two points codes differ. The central server 
internal point code is used for identification of the probe and presentation in a Graphical User Interface (GUI). The 
point code sent with the signaling messages is used for the signaling specific applications. With SI different services 
are identified: TUP, SCCP, ISUP. CIC identifies the traffic channel used between two SEPs. Routing label and CIC is 

so the identification of all messages belonging to the desired call. This information is extracted from the IAM messages 
which is the trigger number. 

[0028] For the trigger of the call trace the following inputs can be given: 

• set of calling -Numbers (A-Number). 
55 • set of called -Numbers (B-Number). 

• redirecting and original number 

• set of IMSI numbers 

• set of TMSI numbers 
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• set of IMEI numbers 

• A digit sequence in the IMSI, TMSI, IMEI, calling or called number can be masked with (wild card : undefined 
number of missing digits) 

• service (speech, data). To avoid to much data this trigger should be used in combination with a number 
5 • The application can be started once, for a fixed number of detected calls or continuously. 

• Start Time of the trace 

[0029] If more than one number is specified (Calling-, called-, IMSI, TMSI , IMEI numbers), then a call shall be detected 
if one of the numbers is detected (logical "or"). 
w [0030] For a standard trigger recognition (ISUP protocol) the following parameters are used: 

1. Detection of I AM and the desired number (mostly B-number). In case of trigger A-number as the recognition 
may fail. 

2. If the B-number is not complete the trigger recognition continues decoding the succeeding SAM messages 
is containing the remaining digits and extract the full B-number. This number is checked against the trigger consid- 
ering wild cards if any. 

3. Continuously the B-number is checked versus the trigger until match. 

4. The routing label and CIC of the recognized I AM is used for further message collection. 

5. After trigger reception the call trace application is informed. The call trace application itself informs all other 
20 agents.. 

[0031] The received trigger enables the succeeding message collection phase. 

[0032] If an agent receives the information that the trigger was received the pointer in the data file is reset in a 
previous section to ensure that all call relevant data can be found. The step back will be a time defined as a parameter 

25 for the central server which depends on the processing time. 

[0033]. In case of a mixed structure of SEPs and STPs it is not guaranteed that all messages follow the I AM path. It 
is possible that e.g. the ACM is sent via a different path. Due to there is no other parameter as routing label and CIC 
to sort this ACM to a previously sent I AM on an other interface the routing label and CIC are required as parameters 
for call establishment. The remaining problem is that the call trace does not know the dynamical usage of the switches 

30 (SEP or STP). Therefore the ACM has to be checked against every routing label/CIC values received from all lAMs 
found during the call trace. (Timer to get the end of I AM transmission, after expiry call establish is sent to all agents 
with the list of values). 

[0034] By performing trigger with I AM/SAM first the IAM is checked. If the first digits in I AM match partly with the 
called-number trigger the called number is generated extracting all following SAMs. The called-number is complete if 

35 the called-number is equal to the predefined trigger. The frequency of SAM depends on the dialing speed of the sub- 
scriber. If the called number is fully specified for trigger a match is possible. In case of wild cards (*) the call trace 
compares all received digits with the defined trigger. If a match is found the call trace is proceeded as usual. If it does 
not match the next message received with the same routing label will stop this call trace. If the trigger contains wild 
card at the beginning of the number (e.g. *454) the match may be done by the received digits from succeeding SAM 

40 messages. The call trace can only performed if also the IAM is part of the collected messages, the reception of the 
IAM must be included in the monitored time (start time). 
[0035] In the case of call forwarding trigger for the call are: 

1. IAM with B-number until the switch which forwards the call (switch 2).The routing label of the IAM is used to 
45 identify all other messages of the original call. 

2. The call is forwarded to the next switch (switch 3) with another number (C-number) and an other routing label. 
The forwarded path is handled as a new call nested with the original call. The ACM message from switch 2 to 
swilch 1 (original path) indicates the call forwarding action. 

3. The next trigger to follow up is the CPG message containing the C-Number (redirection number, which is optional) 
sent from switch 2 to switch 1 . With this C-Number the trace at the interface-2-3 is triggered once more. Looking 
back in the data file the lAM(C-number) is found and all other messages are belonging to this particular call are 
collected using the routing label at interface-2-3. 

4. Multiple call forwardings are possible indicated with the redirection counter 

55 [0036] Redirection number is optional. If this parameter is missing call trace will fail at the second interface. 

[0037] Message collection concerning signaling information belonging to the particular call detected with trigger is 
performed using routing label and CIC. All messages of the call as ACM, ANM, CPG,... are collected. For the standard 
process no further decoding of parameters is necessary. 
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[0038] Triggers events on A..G interfaces: 



Int rface 


Procedure 


Trigger m ssage 


A-interface 


Mobile Originating Call 


Setup (B-number) CM_Serv_Req (IMSI.TMSI) 


A-interface 


Mobile Terminating Call 


Paging, Paging Response (IMSI.TMSI) 


A-interface 


Location update 


Location update Request (IMSITMSI) IMSI Detach (IMSI, TMSI) 


B..G Interface MAP 


Mobile Terminating Call 


Send routing info (MSISDN=B-number) 


B..G Interface MAP 


Mobile Terminating Call 


Provide Roaming number (IMSI) 
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[0039] After trigger reception all corresponding messages are found using SCCP call trace (A-interface ) or TCAP 
call trace (B..G interfaces). 

[0040] For standard trigger recognition the following has to be performed: 

1. Detection of the establish message (s. trigger table above) and the desired number. This number is checked 
against the trigger considering wild cards if any. 

2. The routing information of the recognized establish message is used for further message collection. The corre- 
sponding messages are searched before the trigger event (e.g. SETUP is the establish message on A-interface 
for MOC with the trigger event B-number CM_SERV_REQ is sent earlier) and after the trigger event (until Discon- 
nect). 

3. After trigger reception the call trace application is informed. The call trace application itself informs all other 
agents necessary. In case of A-interface the standard call trace is performed on one agent only. Therefore the 
routing information is not distributed. 

[0041] The received trigger enables the message collection phase in pre- and post trigger direction. Each agent will 
handle the call trace locally and passes the results directly after reception to the call trace application on the central 
server CS. Communication between the agents is performed via the call trace application on the central server CS 
only. If an agent receives the information that the trigger was received the pointer in the data file is reset in a previous 
section to ensure that all call relevant data can be found. The step back will be a time defined as a parameter for the 
call trace application which depends on the processing time (e.g. 5 sec). 

0042] In case of handover the call is already detected and has to be traced from the original network components 
to the destination components. The trigger is the message HO Required (A-lnterface) with HO cause and a list of 
preferred neighbor cells sent from the original BSS 

0043] List of supported scenarios: 

Call Trace of Speech calls (including Emergency calls with or without SIM Card) 
Call Trace of Short Message Service calls 
Call Trace of Data calls 
Call Trace of automatic fax calls 

Mobile -> Mobile 
Mobile -> Fixed network 
Mobile <-> Intelligent network 
Mobile <-> Corporate Link (PABX - EDSS1) 
Mobile -> Mailbox 

Mailbox -> Mobile (Outcalling and SMS) 
Mailbox -> Fixed network (Outcalling) 
SMS Service Centre <-> Mobile 
Fixed network -> Mobile (HLR Interrogation) 

Fixed network -> Mobile (Call Rerouting , Call Forwarding Unconditional HLR) 
Call Forwarding Mobile -> Mobile (conditional Forwarding VLR - CFNRY CFNRC CFB) 
Call Forwarding Mobile -> Fixed network (conditional Forwarding VLR - CFNRYCFNRC CFB) 
Call Forwarding Fixed network -> Mobile (conditional Forwarding VLR - CFNRYCFNRC CFB) 
Multiple call forwarding (until max. number of call forwardings) 
Multi party calls 
Call waiting 
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• Call hold 

• All activities regarding supplementary services are included in the call traces. 
[0044] Figure 8 depicts the different protocol stacks. 

[0045] In Figure 9 the principle of multiple protocol stacks within one call - abstract protocol layer for communication 
between agent I A and central server CS is shown. A full call trace requires the interactive handling between information 
received from interfaces with different protocol stacks, e.g. a call trace for a mobile terminating call requires handling 
of SS#7-ISUP, MAP and A-lnterface protocol stacks. The agents decode the incoming signalling information and extract 
the respective- information for the central server. To avoid new decoding in the central server and for effective data 
handling an abstraction layer is necessary which is protocol independent. The communication interface between in- 
telligent agent and manager is protocol independent and correlates to the states of a call trace: 



20 [0046] The messages passed belween agent and cenlral server are independent of the actual protocol stack. This 
abstraction is necessary to provide a full call trace via several protocol stacks without implementation of protocol specific 
parts in the manager. The message interface handles all procedures described above, e.g. 

• Standard call trace, I SUP 

2S • Standard call trace, A-lntcrfacc 

• Standard call trace, TCAP 

• RLC/REL not received (or the equivalent messages on the other protocol stacks) 

• Call forwarding, ISUP and PLMN 

• Hand over 

30 

[0047] For maintaining the result presentation in the different depth the interface provides messages to get the re- 
spective information to be presented (message list presentation). 

[0048] This has the advantages that the central server does not need the protocol dependent information -> easier 
program handling, the protocol information is capsulated in the intelligent agent only, abstraction of protocol dependent 
35 scenarios to call related scenarios is possible, and effective correlation of protocol dependent data belonging to the 
same call. 

[0049] Figur 10 shows the principle arrangement of central server CS and intelligent agents. The call trace agents 
IA running directly on the probe and the call trace application realised in the central server CS. The central server CS 
comprises the call trace application 12 and a call trace application interface 13 which communicates with the agent 
40 interface 14 of the intelligent agents I A. The agent interface 14 communicates with the call trace function 15. Data are 
stored in the storages 16. 

[0050] The agent analyses the signaling data on the probe due to the configured conditions (e.g. Called-number) 
and sends the results to the call trace application. The agent is configured by the call trace application and does not 
have an own user interface. The call trace application configures all connected agents and is responsible for the com- 
45 munication between the agents. The user interface of the call trace is served by the call trace application. The com- 
munication is realised with a standardized frame work which is basis for all applications. 

[0051] Figure 11 shows the principle of the functional structure. The call trace application in the central server CS 
consists of call trace GUI 12, call trace application kernel 7, application/agent communication interface 8 and GUI/ 
kernel interface 9. The call trace application controls all connected agents, provides the communication between agents 

50 and presents the results. 

[0052] The call trace application kernel 7 configures all necessary agents due to the configuration (links, trigger 
events, call trace scenario parameters) selected by the user, communicates with call trace agents, provides commu- 
nication between call trace agents, controls the call traco scenarios, stores results in data base, and transfers the 
trigger results to the user interface (call trace GUI). 

55 [0053] Agent/application communication interface 8 is a message interface between call trace application kernel 7 
and agents. Communication is performed via XDR packet. 

[0054] For call trace a graphical user interlace 1 2 is used to configure the call trace application kernel 7, to set the 
call trace parameters and to present the results. Communication between GUI 12 and application is performed using 



Idle 

Establish 



IE->ZS if trigger matches 

I ZS->IE containing the respective routing labels 
IE->2S if traffic channel switched 

IE->ZS if call terminates 

II ZS->IE to stop all connected agents (IE) 



15 



Establish all 
Traffic IE 
Terminated 
Terminate all 
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GUI/kernel interface 9. Result files and configurations are stored on a disc storage 10. 

[0055] Further established is a dynamic time synchronisation of the agent IA disabling the influence of processing 
time and timer supervision. The net wide call trace is an application of the SS#7 and Mobile Surveillance System. The 
system monitors all connected signalling links. All signalling data are stored onto disc where they are available for 
s applications for about three days (depending on the size of the hard disc). The net wide call trace processes the data 
onto disc either online (e.g. data of the call may be received later) or offline (the whole call is already stored onto disc. 
In parallel other application may run on the system in parallel to the call trace. Therefore the incoming signalling traffic 
is asynchronous to the processing speed of the net wide call trace. 

[0056] To avoid lost messages belonging to the call and to optimize the processing time it is essential that the pointer 
10 to the data in the files will be reset on each change of the status. In addition timer handling is used to stop a process 
if the expected data is not received in time. 

[0057] Each data passed from the agents I A to the central server and vice versa contains a time stamp for correlation 
extracted by the actual signalling traffic. This time stamps correlate to the recorded data onto disc and are used for 
positioning the pointer to the file. The call trace uses the time stamp of the signalling traffic (network clock) to assure 
15 the recognition of all messages received which belong to the call. 

E.g. 

• I AM messages are detected matching the trigger by more than one agent IA: All these agents I A inform the central 
cerver CS and pass the respective time stamp which will not have the same value (time is required to pass this 

20 |AM via several switches in Ihe network). 

• CS takes the last time stamp received and distributes the routing labels with this time stamp to all agents. 

• The agents I A set the pointer to the data in the file with this time stamp. The succeeding messages of the call must 
be received after this pointer. 

25 Advantages: 

[0058] 

• All messages are detected even if the processing time of the call trace is too high. 

30 • Optimization of the number of messages in the files to be processed. If the pointer is set too early many messages 
are decoded which cannot be part of this call. 

[0059] Further established is a wait timer for status handling. The central server has to await the full reception of 
information from the intelligent agent I As , e.g. the I AM is not received only once but several times by different intelligent 
35 agents IA . The certral server CS does not know in advance how many replies by the intelligent agents IA he will 
receive. Therefore a timer in the certral server CS is required for supervision of the replies. 

• The certral server CS passes the trigger to the intelligent agents I A and enables the call trace. The certral server 
CS expects the reception of the first establishment message by one of the intelligent agents I A . This action is not 

40 supervised by a timer. 

• If one of the intelligent agents IA returns the match of the trigger the certral server CS starts a timer T1 expecting 
further replies. On each new reply by one of the intelligent agents I A the certral server CS restarts T1 . If T1 expires 
the certral server CS stops awaiting replies and starts the distribution algorithms (s. chapter 1 ) to pass the routing 
information to the respective intelligent agents IA . If T1 expires the call trace assumes that either the call establish 

45 messages is routed completely or passed via not connected interfaces. 

• Entering traffic phase is not supervised 

• If one of the intelligent agents IA returns call termination the certral server CS starts a timer T2 expecting further 
call termination from the intelligent agents IA. On each new reply by one of the intelligent agents IA the certral 
server CS restarts T2. If T2 expires the certral server CS stops awaiting replies and terminates all intelligent agents 

so I A. 

Advantages: 
[0060] 

55 

• Optimization of the processing time 

• Avoids loosing data 

• Configurable for adaptation to different systems 
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[0061] For for calls with long call duration an expiry timer is established. Especially if more than one call is detected 
with the same phone number (option of the call trace) a timer may be necessary to stop a call by the call trace application 
if it expires the max call duration. The reason may be a lost call termination, e.g. if the links where the call was released 
were not traced. 

• The timer Td is started on entering the traffic status, call establishment is not affected 

• If Td expires the certral server CS terminates all intelligent agents I A without reception of the call related termination . 



[0062] For handling of incomplete triggers (SAM and wild cards) as well as for handling of incomplete call termination 
the method provides diferrent procedural algorithms. The call trace application on the central server CS has not the 
knowledge of the number of digits which are required to complete the numbering. Therefore a tolerant algorithm is 
necessary to provide trigger match in case of ISUP SAM and wild cards. ISUP SAM is used to transfer digits after 
transmission of the I AM with begin of the phone number. The intelligent agent IA compares the digits transferred by 
IAM with the entered trigger. In case of wild cards only the entered digits are checked. If the trigger does not match 
but the IAM message indicates that SAM will follow the intelligent agent I A continues collecting the digits received with 
SAM messages and compares the whole number with the entered trigger. If the trigger matches the intelligent agent 
IA returns the routing label to the certral server CS and the call trace is continued as usual. 



Advantages: 
[0063] 

• Tolerant algorithm concerning the unpredictable time between IAM and SAM or between several SAM messages 
(subscriber dependent) 

• Combined with the algorithm described below the call trace may continue even if the first call trace don't match. 
E.g. if the last expected digit is not received (trigger does not match). The call trace is enabled for trigger match 
until a new establishment message is received with the same routing label. 



[0064] Call termination is signalled using two messages: Release RL and Release complete RLC. If both messages 
are received by the activated intelligent agents IA the call trace is properly terminated. If one or both messages are 
not detected by the intelligent agents IA a termination algorithm is started. 



• Release is received by one or several intelligent agents IA. They inform the certral server CS. The certral server 
CS starts a timer T3. If this timer expires without reception of Release complete the manager terminates all activated 

35 intelligent agents I A. 

• Release is not received by a intelligent agent I A. Certral server CS and intelligent agents I A continue awaiting for 
messages belonging to this call. If one of the intelligent agents I A receive a new call establishment message using 
the same routing label of the already established call the adequate intelligent agent IA passes the routing label to 
the certral server CS. The certral server CS terminates the old call on all activated intelligent agents IA. This 

40 algorithm is used in case of termination (no new call trace to be triggered for) and in case of starting a new call trace. 



Claims 



1. Method for net wide call trace of al least one call within a telecommunication network with various interfaces and 
protocol stacks by using a central call trace server (CS) and local intelligent call trace intelligent agents (I A) between 
the switching points (SP) of the telecommunication network, said central call trace server being connected with all 
of said local intelligent call trace intelligent agents I A, with the following steps: 



activating of the intelligent intelligent agents I A by the central server (CS) together with a message comprising 
the a trigger (TN) to be call traced; 

comparing of the trigger (TN) with the contents of the call establishment messages of the calls running on the 
signalling channel (SC) by the intelligent intelligent agents (I A) and sending an establish message to the central 
server (CS) by those intelligent agents I A which have matched with the trigger number together with additional 
information (RL) about the detected connection between two switching points (SP) as well as at least the 
identification number of the intelligent agent I A; 

sorting of the messages and information (RL) by the central server (CS) sent by the intelligent agents (IA), 
removing of redundant information and allocating of the information to the respective section belonging to two 
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switching points (SP) being connected together; 

- tracing of all signalling data belonging to the detected call by the intelligent agents (IA) being involved in view 
of the matching of the trigger (TN); 

detecting of the call terminating by at least one of said intelligent agents (I A) and sending a call termination 
message to the central server (CS), forwarding of the message concerning the call termination to all the other 
intelligent intelligent agents (IA) being involved in the call trace; and 

- transmitting of the recorded data to the central server (CS) and displaying of the data by the central server 
(CS) dependend on the different transmission layers in the telecommunication network. 

2. Method according to claim 1 comprising 

informing of said intelligent agents (IA) of said section between the switching points (SP) being not involved 
according to the topology of the telecommunication network about the the detected connections; 
selecting and activating of those intelligent agents (IA) according to the topology of the telecommunication 
network being not involved which are arranged in the environment of the transmission path of the traced call. 

3. Method according to claim 2 comprising 

activating of those intelligent agents (IA) which are connected to a section between two switching points 
(SP), said section being connected at least to one switching point (SP) already detected in previous signaling data. 

4. Method according to claim 2 comprising 

sending of a new trigger (TN) by the central server (CS) to the other intelligent agents (I A) in the environment 
of the switching points (SP) being involved in the transmission of the traced call, if one of the intelligent agents 
(IA) indicates a change of the original trigger in a new trigger. 

5. Method according to one of the proceeding claims comprising 

extracting of information about the transmission events in the traced signaling channel (TC) independent from 
the kind of the transmission protocol stack and sending this information to the central server (CS) by the 
respective intelligent agents (IA). 

sending of this information to the other active intelligent agents (I A) for comparing with the supervised, and 
communicating between the intelligent agents and the central server independent from the kind of the trans- 
mission protocol stack. 

6. Method according to one of the preceeding claims comprising 

providing all data being transferred between the intelligent agents (IA) and the central server (CS) with a time 
stamp (TS); 

recording of the time stamp (TS) of the last received call establish message from the respective intelligent 
agent (I A) and distributing the information (RL) to the other intelligent agents (I A) with this time stamp (TS) by 
the central server (CS). 

7. Method according to claim 6 comprising 

distributing the information with the last received time stamp (TS) of a call by the central server (CS) and 
setting the pointer to the data in the file with this time stamp by the intelligent agents (I A). 

8. Method according to claim 6 or 7 comprising 

starting of a timer (T1 ) by the central server (CS) always when receiving an establish message from an intel- 
ligent agent (I A), said timer having a preselected time period within a establish message from the next intelligent 
agent (I A) has to be received by the the central server (CS), and 

sending of information (RL) to all other intelligent agents (I A) and stopping awaiting replies after expiration of 
the preselected period by the central server (CS) which regards the messages as complete or the call as being 
passed via interfaces which are not connected for call trace. 

9. Method according to one of the preceeding claims 6 to 8 comprising 
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starting of a timer (T2) by the central server (CS) when receiving a call termination message from an intelligent 
agent (IA) and restarting of the timer when receiving the next call termination message, said timer having a 
preselected time period within a call termination message from the next intelligent agent (I A) has to be received 
by the the central server (CS), and 
5 - informing of all intelligent agents (I A) being involved in the call trace by the central server (CS) about the call 

termination after expiration of the preselected time period. 

10. Method according to one of the preceeding claims 6 to 9 comprising 

10 • starting of a timer (Td) by the central server (CS) when entering the traffic status, said timer having a prese- 

lected time period for maximum call duration, and 

termination of the call trace and information of the involved intelligent agents (IA) either by exceeding the 
- maximum call duration or by detecting of a further call having the same call information (RL). 

15 11. Method according to one of the preceeding claims comprising 

sending of a signalling message in several subsequent messages, 

collecting of the subsequent messages following the message and comparing with the trigger (TN) by the 
intelligent agents (IA); and 

sending of the establish message by the intelligent agents (IA) to the central server (CS) in case of matching 
with the trigger number (TN). 



20 



12. Method according to one of the preceeding claims comprising 

25 - sending of a message by at least one of the intelligent agents (IA) to the central server (CS) in case that the 

respective intelligent agent (I A) has detected a first call termination signal (RL); 

starting of a timer (T3) by the central server (CS) after having received the message from the intelligent agent 
- (IA), said timer having a preselected time period within a second call termination signal (RLC) is expected 
from the intelligent agent (IA) by the the central server (CS); and 
30 • terminating of all the involved intelligent agents (I A) by the central server (CS) at latest after the expiration of 

the period. 

13. Method according to one of the preceeding claims comprising 

35 - terminating of the call trace by the central server (CS) in case that one of the intelligent agents (IA) sends a 

new establish message with the accompanying parameters which complies with call information (RL) of the 
already traced call. 

14. Arrangement for net wide call trace of at least one call within a telecommunication network comprising a central 
to call trace server (CS) and local call trace intelligent agents (IA) between the switching points (SP) of the telecom- 
munication network, said central call trace server (CS) being connected with all of said local call trace intelligent 
agents (IA) and comprises a call trace managing means with a call trace graphical user interface (GUI) and an 
interface connected to said intelligent agents (IA), and said intelligent agents (IA) comprise an interface to the 
central server (CS) and an intelligent call trace unit (IU), said central server (CS) and intelligent agents (IA) being 

45 adapted to communicate with each other and to perform the following operations: 

activating of the intelligent agents IA by the central server (CS) together with a message comprising the a 
trigger number (TN) to be call traced; 

comparing of the trigger number (TN) with the call establish messages of the calls running on the signalling 
channel (SC) by the intelligent agents (IA) and sending an establish message to the central server (CS) by 
those intelligent agents IA which have matched with the trigger number together with additional information 
(RL) about the detected connection between two switching points (SP) as well as at least the identification 
number of the intelligent agent IA; 

sorting of the messages and information (RL) by the central server (CS) sent by the intelligent agents (IA), 
55 removing of redundant information and allocating of the information to the respective section belonging to two 

switching points (SP) being connected together; 

tracing of all signalling data of the signalling channel (SC) by the intelligent agents (I A) being involved in view 
of the matching of the trigger (TN) and transmitting of the call relevant data to the central server (CS); 



so 
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detecting of the call terminating by at least one of said intelligent agents (I A) and sending a respective message 
to the central server (CS), forwarding of the message concerning the call termination to all the other intelligent 
agents (IA) being involved in the call trace; and 

transmitting of the signaling data of the call from the intelligent agents (I A) to the central server (CS) and 
s displaying of the stored data by the central server (CS) dependend on the different transmission layers in the 

telecommunication network. 

15. Arrangement according to claim 14 being adapted to perform 

io - informing of said intelligent agents (IA) of said section between the switching points (SP) being not involved 

according to the topology of the telecommunication network about the the detected connections; 
selecting and activating of those intelligent agents (IA) according to the topology of the telecommunication 
network being not involved which are arranged in the environment of the transmission path of the traced call. 

15 16. Arrangement according to claim 15 being adapted to perform 

activating of those intelligent agents (IA) which are connected to a section between two switching points (SP), 
said section being connected at least to one switching point (SP) already detected in previous signaling data.. 

20 17. Arrangement according to claim 14 being adapted to perform 

sending of a new trigger (TN) by the central server (CS) to the other intelligent agents (I A) in the environment 
of the switching points (SP) being involved in the transmission of the traced call, if one of the intelligent agents 
(IA) indicates a change of the original trigger number in a new trigger number. 

25 18. Arrangement according to one of the proceeding claims 14 to 17 being adapted to perform 

extracting of information about the transmission events in the traced signaling channel (SC) independent from 
the kind of the transmission protocol and sending this information to the central server (CS) by the respective 
intelligent agents (IA), and 

30 - sending of this information to the other active intelligent agents (I A) for comparing with the supervised calls. 

19. Arrangement according to one of the preceeding claims 14 to 18 being adapted to perform 

providing all data being transferred between the intelligent agents (I A) and the central server (CS) with a time 
35 stamp (TS); 

recording of the time stamp (TS) of the last received message from the respective intelligent agent (IA) and 
distributing the information (RL) to the other intelligent agents (IA) with this time stamp (TS) by the central 
server (CS). 

40 20. Arrangement according to claim 1 9 being adapted to perform 

distributing the information with the the last received time stamp (TS) of a call by the central server (CS) and 
setting the pointer to the data in the file with this time stamp by the intelligent agents (IA). 

45 21 . Arrangement according to claim 1 9 or 20 being adapted to perform 

starting of a timer (T1 ) by the central server (CS) always when receiving an establish message from an intel- 
ligent agent (I A), said timer having a preselected time period within a establish message f rom the next intelligent 
intelligent agent (IA) has to be received by the the central server (CS), and 
so - sending of information (RL) to all other intelligent agents (I A) and stopping awaiting replies after expiration of 

the preselected period by the central server (CS) which regards the messages as complete or the call as being 
passed via interfaces which are not connected for call trace. 

22. Arrangement according to one of the proceeding claims 1 9 to 21 being adapted to perform 

55 

starting of a timer (T2) by the central server (CS) when receiving a call termination message from an intelligent 
agent (IA) and restarting of the timer when receiving the next call termination message, said timer having a 
preselected time period within a call termination message from the next intelligent agent (I A) has to be received 
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by the the central server (CS), and 

informing of all intelligent agents (IA) being involved in the call trace by the central server (CS) about the call 
termination after expiration of the preselected time period. 

5 23. Arrangement according to one of the preceeding claims 1 9 to 22 being adapted to perform 

starting of a timer (Td) by the central server (CS) when entering the traffic status, said timer having a prese- 
lected time period for maximum call duration, and 

termination of the call trace and information of the involved intelligent intelligent agents (I A) either by exceeding 
10 the maximum call duration or by detecting of a further call having the same call information (RL). 

24. Arrangement according to one of the preceeding claims 14 to 23 being adapted to perform 

sending of a signalling message in several subsequent messages, 
75 - collecting of the subsequent messages following the message and comparing with the trigger (TN) by the 

intelligent agents (IA); and 

sending of the establish message by the intelligent agents (IA) to the central server (CS) in case of matching 
with the trigger number (TN). 

20 25. Arrangement according to one of the preceeding claims 14 to 24 being adapted to perform 

sending of a message by at least one of the intelligent agents (IA) to the central server (CS) in case that the 
respective intelligent agent (IA) has detected a first call termination signal (RL); 

starting of a timer (T3) by the central server (CS) after having received the message from the intelligent agent 
25 (IA), said timer having a preselected time period within a second call termination signal (RLC) is expected 

from the intelligent agent (IA) by the the central server (CS); and 

terminating of all the involved intelligent agents (I A) by the central server (CS) at latest after the expiration of 
the period. 

30 26. Arrangement according to one of the preceeding claims 14 to 25 being adapted to perform 

- terminating of the call trace by the central server (CS) in case that one of the intelligent intelligent agents (I A) 
sends a new establish message with the accompanying parameters which complies with trigger number (TN) 
of the already traced call. 

35 
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